Privacy Policy v3cuci — Malaysia Player Data Protection

Welcome to the Privacy Policy v3cuci. This document clearly and transparently explains how the v3cuci platform — accessible via v3cuci.biz and our mobile app — collects, processes, stores, and protects your personal data as a Malaysian user and player.

V3cuci takes player privacy seriously. We understand that your trust is the foundation of a strong relationship between the platform and its players. That is why we are committed to being transparent about the data we collect and how it is used — not merely because the law requires it, but because we believe it is simply the right thing to do.

This Privacy Policy is to be read together with v3cuci Terms & Conditions and forms part of the overall agreement between you and our platform. By registering an account or using the v3cuci platform, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services and contact us to delete any data that may have been collected.

V3cuci collects only the data genuinely necessary to provide platform services safely and effectively. The following are the categories of data we collect:

Data You Provide Directly

• Registration information: Full name, phone number, email address, and the password you chose when registering your v3cuci account.
• Identity verification (KYC) information: A copy of your MyKad or passport, a selfie for facial verification, and proof of address may be requested during the KYC process.
• Financial information: Bank account numbers and digital wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals. v3cuci does not store credit or debit card numbers directly.
• Support communications: Live chat conversation history, emails, and any documents you submit to the v3cuci support team.

Automatically Collected Data

• Device and technical data: IP address, device type, operating system, browser version, and screen resolution.
• Platform activity data: Game history, betting history, deposit and withdrawal history, as well as session times and durations on the platform.
• Cookie and tracking data: Information collected through cookies, pixels, and similar tracking technologies — described in further detail in Section 9.
• Approximate location data: Estimated country and state based on IP address, for security verification and geographic compliance purposes.

V3cuci uses collected data for clearly defined, legitimate purposes only. Below is a summary table of how data is used:

V3cuci does not use your personal data for any purpose beyond those stated in the table above without first obtaining your additional consent.

V3cuci processes your personal data on valid legal grounds under Personal Data Protection Act 2010 (PDPA) Malaysia. There are four main legal bases we rely on:

• Consent: For marketing communications and any additional processing not required for core services — we ask for your explicit consent upfront, and you may withdraw it at any time.
• Performance of Contract: For data processing necessary to enable us to deliver platform services to you — including account management, financial transaction processing, and game provision.
• Legal Obligation: For data processing required under Malaysian law — including KYC obligations under the Anti-Money Laundering Act (AMLA) and reporting to relevant authorities when required.
• Legitimate Interests: For processing necessary to protect the platform and its users from fraud, misuse, and security threats — provided your interests do not override these.

V3cuci does not sell players' personal data to any third party. We only share data in the following limited circumstances:

• Payment service providers: Minimal transaction data is shared with payment processors that facilitate your deposits and withdrawals — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. All these providers are bound by strict confidentiality agreements.
• Game software providers: Basic game session data is shared with casino software providers that supply games to the v3cuci platform, strictly for technical and RNG compliance purposes.
• Authorities and law enforcement agencies: v3cuci will disclose personal data to Malaysian authorities when required by a valid court order, legal writ, or a request from an authority with proper legal jurisdiction.
• Technology service providers: Cloud computing, system analytics, and cybersecurity service providers contracted by v3cuci — all bound by strict data processing agreements and prohibited from using the data for their own purposes.

V3cuci applies comprehensive technical and organisational security measures to protect players' personal data against unauthorised access, loss, alteration, or accidental disclosure:

• Encryption in transit: All communication between your device and v3cuci's servers is secured using TLS 1.3 and 256-bit SSL encryption, ensuring that data cannot be intercepted by third parties while in transit over the internet.
• Encryption of stored data: Sensitive personal data such as KYC information and financial details is stored in encrypted form using AES-256 encryption on v3cuci's servers.
• Internal access controls: Access to player data within v3cuci's internal systems is governed by a "need-to-know" principle — only staff who require access to carry out their specific duties are granted permission, and every access is recorded in an audit log.
• Two-factor authentication: All v3cuci internal systems that store player data are protected with multi-factor authentication to prevent unauthorised access even in the event of compromised login credentials.
• Continuous security monitoring: Threat detection and security monitoring systems operate 24/7 to identify and respond to any suspicious activity.
• Regular penetration testing: v3cuci conducts regular security testing by independent third-party experts to identify and address any vulnerabilities before they can be exploited.

V3cuci retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law:

• Active account data: Retained for the lifetime of your active v3cuci account, plus any post-closure retention period required by law.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysian legal requirements under the Companies Act 2016 and the Anti-Money Laundering Act (AMLA).
• KYC records: Retained for a minimum of 6 years after account closure or the date of the last KYC review, in accordance with anti-money laundering compliance requirements.
• Support communication logs: Retained for 3 years for reference purposes and resolution of any disputes that may arise.
• Marketing data (with consent): Retained until you withdraw consent or request deletion, whichever comes first.
• Technical and security logs: Retained for 12 months for security analysis and incident investigation purposes.

Once the specified retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked back to you.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by v3cuci:

V3cuci uses cookies and similar tracking technologies to enhance the user experience and platform security. The following are the types of cookies we use:

You can manage cookie settings through your web browser preferences. However, disabling necessary cookies may significantly affect the functionality and security of the v3cuci platform. Optional cookies can be declined without affecting core platform functionality.

The v3cuci platform is intended solely for individuals aged 18 years and above. v3cuci does not knowingly collect, process, or store personal data of individuals under the age of majority.

Should v3cuci discover that personal data belonging to an individual under 18 has been collected without our knowledge, we will promptly delete that data and close the associated account. Parents or guardians who believe their child may have registered on the v3cuci platform should contact us immediately at support@v3cuci.biz so that swift action can be taken.

In the course of its operations, v3cuci may transfer players' personal data to servers or service providers located outside Malaysia. Any such transfer is subject to the following safeguards:

• Transfers are only made to countries or entities that provide a level of data protection equivalent to or higher than that required under Malaysia's PDPA.
• Legally binding data processing agreements are in place with all international data recipients, requiring them to protect data in accordance with Malaysia's PDPA standards.
• For transfers to countries without equivalent data protection laws, v3cuci applies additional safeguards such as approved standard contractual clauses.

V3cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. All amendments will be posted on this page with a new update date.

For material amendments that significantly affect your privacy rights, v3cuci will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the v3cuci platform after an amendment takes effect constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your personal data. A version history of the Privacy Policy is available upon request by emailing our privacy team.

If you have any questions, concerns, or complaints regarding how v3cuci handles your personal data, or to exercise any of your data rights, please contact our privacy team:

• Dedicated Privacy Email: support@v3cuci.biz — Please include "Privacy Inquiry" or "Data Rights Request" in your email subject line.
• Live Chat: Available 24/7 within the v3cuci platform — for general privacy inquiries that do not require written documentation.

We aim to respond to all privacy enquiries within 14 working days. For more complex requests such as data access or data deletion, the full processing period is 21 working days from the date a complete request is received.

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with Personal Data Protection Commissioner of Malaysia established under PDPA 2010.